Owa and non forms based authentication

I am having trouble getting Owa forms based authentication to work with
Oma(i have a previous post on this).  I'm wondering just how much of a
security risk Owa non FBA really is.  Is the authentication information
really sent in clear text(i know the session information is encrypted
when using ssl with owa).  Thanks

0
11/4/2006 5:14:09 PM
exchange.admin 57650 articles. 2 followers. Follow

1 Replies
288 Views

Similar Articles

[PageSpeed] 39

FBA sends the authentication across the network in clear text, that is why 
SSL is required to implement it. IMHO, adding FBA increases your security by 
a pretty good factor?  Want a number, how about "doubles it"?  I'm just 
basing this on the fact that it is harder for someone to get in to one of 
your user's mailboxes after they have used a public computer and navigated 
past their OWA screen (the "hacker" can sit down and click Back, Back, Back 
until they get back to OWA).  FBA times out the connection.

Do you have an E2K3 FE server?   Enabling SSL and FBA in a single server 
environment breaks ActiveSync and OMA.  Lots of info has been written on 
this.  Here is a blog entry I have from where I wrestled with this 
previously.
http://mostlyexchange.blogspot.com/2006/08/windows-mobile-and-activesync.html

Also, Exchange MVP Daniel Petri wrote a couple of good articles on this 
(with screen captures!)
http://www.petri.co.il/problems_with_forms_based_authentication_and_ssl_in_activesync.htm

HTH,

-- 
Jim McBee
Blog - http://mostlyexchange.blogspot.com
Directory Update - http://www.directory-update.com



"mmark75" <michael@lakewood.cc> wrote in message 
news:1162660449.512942.259680@b28g2000cwb.googlegroups.com...
>I am having trouble getting Owa forms based authentication to work with
> Oma(i have a previous post on this).  I'm wondering just how much of a
> security risk Owa non FBA really is.  Is the authentication information
> really sent in clear text(i know the session information is encrypted
> when using ssl with owa).  Thanks
> 


0
jmcbee9404 (625)
11/4/2006 10:02:22 PM
Reply:

Similar Artilces:

Making a form Maximize when opened?
How do I do this? "m galvin" <mgalvin@discussions.microsoft.com> wrote in message news:7BE1B7CF-E57A-42D5-B103-8A48E657C0E5@microsoft.com... > How do I do this? In the form's Open event, execute the statement: DoCmd.Maximize Note that maximizing a form also maximizes any other (non-popup) forms and reports, so you may want to restore things when the form closes. In that case, you could use the form's Close event to execute the statement DoCmd.Restore You can also do the same thing using the corresponding macro actions, Maximize an...

Locate a cell, based on a criteria, then use the 'Cell' command...
I am using a pivot table to configure some data. In the first column, the pivot table of course displays only one instance of the text representing of data group. What I need to do is determine in which cell a particular item of text (i.e. the criteria) resides in. Once I can locate the cell where my 'criteria' text string resides, I can then use the CELL function to return the row number. My question is... what excel formula can I use to locate a cell in a single column range, where the cell contains the text = "XYZ" My eventual plan is to then use the following ...

Making the custom form available
Hello: I have an exisiting contacts in the contacts folder. I redesigned the contact form and published it and now have all my new conacts using the new form. However how do I get the older pre exisitng contact items to update to the new form. Thanks Brian You would need to update the message class. See the link below for more info. http://support.microsoft.com/default.aspx?scid=kb;en-us;201087&sd=RMVP "Brian" <waly2990@optonline.net> wrote in message news:OkFVg.204$Jl6.125@newsfe08.lga... > Hello: > I have an exisiting contacts in the contacts folder. I...

Javascript alerr in crm forms
If you open a crm form for an account/contact or any other entity, make some changes and try to close the window without saving information, you see this javascript pop up which warns you of the unsaved information. In our deployment, we see this window even if we do not change anything!! Any idea how to take care of this issue? Thanks Typically this is caused when records were saved without some "default" information that the forms wants in there. This could have been from integration or data saved prior to the form being updated. Matt Parks MVP - Microsoft CRM ------------...

OWA 2003 #14
Hello, I know the default site for owa is http://server/exchange However, I'd like external users to use: http://mymail.server.com without the use of having to put /exchange. What do I need to do in IIS to get this done? On Thu, 4 Aug 2005 11:58:02 -0700, jessem <jessem@discussions.microsoft.com> wrote: >Hello, I know the default site for owa is http://server/exchange > >However, I'd like external users to use: http://mymail.server.com without >the use of having to put /exchange. > >What do I need to do in IIS to get this done? Take a look here: http://ww...

SFO Question about authentication
When SFO is "offline" , is there any validation against the current logged on user. i.e Does SFO check the current user to see if they are a valid CRM user? Thanks Mike Yes it does. Frank Lee Workopia, Inc. http://www.workopia.com/Links.htm San Francisco, CA "Mike R" wrote: > When SFO is "offline" , is there any validation against the current logged > on user. i.e Does SFO check the current user to see if they are a valid CRM > user? > > Thanks > > Mike > > > ...

How do you create a list with name address phone in a column form.
I have an excel file with last name, first address city state in each column. I want to prepare a two column report with each persons name first then address then phone. Can't remember how to print out a different view of excel. Making it look more like a two column word document. Maybe you can use MSWord's MailMerge. http://www.mvps.org/dmcritchie/excel/mailmerg.htm http://www.mvps.org/word/FAQs/MailMerge The first is from David McRitchie and the second is by Beth Melton and Dave Rado. denise108 wrote: > > I have an excel file with last name, first address city state ...

OWA issues
We are running MSEX 5.5, NT4 SP6. Last night the system crashed and cameup with OWA not functioning. Event log shows the following errors: Error: File /exchange/USA/inbox/peerfldr.asp Unexpected error Error: File /exchange/USA/LogonFrm.asp Unexpected error An object call caused an exception. (IID: {51372AEF- CAE7-11CF-BE81-00AA00A2FA25}) (Method: 3) (Microsoft Transaction Server Internals Information: File: i:\viper\src\runtime\mtxex\activity.cpp, Line: 889) (Exception: C0000005) (Address: 0x77f64afa) ntdll!RtlAllocateHeap + 0x432 MSVCRT!malloc + 0xD2 MSVCRT!malloc + 0x26 ...

need excel worksheet help, running total based on date
I am trying to add a series of numbers in different worksheets(same spreadsheet) based upon the date. I don't want the future numbers in the total until the date they are associated with is passed. i.e. in A1 of each worksheet is 200. Each worksheet is titled by date (Mar 5, Mar 19, etc) I want the running total to reflect the amount to the current date. If it's March 18th, the totals would be only thru the worksheet of Mar 5. Any help is appreciated. My solution needs 2 cells, one of which may already be in use: You need a cell on each of the dated sheets that...

Personal Address book in OWA
How do you configure OWA so that users are able to pull their Personal Address books. I noticed the Global Address list and Contacts when using the drop down menu, but cannot find out where to include a users' Personal Address Book. Do I have to create separate Address Lists in System Manager for EX2K3? Can somebody give me the steps to do it? Thanks in advance, Bill You can't. OWA can't access .pst files. You would need to have them put their personal contacts in the Exchange store, perhaps create a separate contact folder and call it "personal" "Bkana"...

Double click to open form and create new record
Hi team, Have scoured all of the posts and tried several different things for days but just can't seem to nut this one out. I have a form (FrmSeedBankStockAvailable) in datasheet view that lists seed lots by BatchID. I want to be able to double click on the record selector for a particular batch and have a form (DialogSeedBankWithdrawal) open so that I can make a new withdrawal entry, with the BatchID already entered from the selected record. I know that to do this I need to use the forms' DblClick property. I have been using the following code (and tried variations of from...

WORD FORMS
I need to change the colour of a CELL in a word form depending on the seletion of a Dropdown form called "Select Level" which provides 4 differing levels to choose from. Level 1 = Platinum Level 2 = Gold Level 3 = Silver Level 4 = Bronze And i Wish to change the colour of cells further down the form to those colours specified against each level. I believe that I may need touse a macro to do this, but have never actually used one before and do not even know how to start (Complete Novice in Macro) so would need instructions of how to input the macro if anyone is kind e...

OWA 2003 can't receive e-mail from Internet
OWA 2003 can't receive internet e-mail I'm using Server 2003 and Exchange 2003. I can send intranet/internet e-mail using OWA 2003. I can send/receive Intranet e-mail using OWA 2003. I can NOT send Internet e-mail to my OWA account - or - I can NOT receive Internet e-mail using OWA. Any help would be greatly appreciated. I receive the following error: This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. Thanks, Allen ashorod@hotmail.com Please explain your problem more precisely; what you have explained seems self-c...

OWA view to a directory tree
Hi, For some reason when I tried to access my e-mail via webmail I can only see a directory tree... can anyone help me please. Thanks in advanced, Henrique Alves. I don't know exactly how it happened, but I recently had the same experience. I disabled and then re-enabled Forms Based Authentication to fix mine using the following instructions: In E2K3 ESM, drill down to the Exchange Virtual Server under Servers | <ServerName> | Protocols | HTTP | Exchange Virtual Server Right click on Exchange Virtual Server Choose the Settings tab Uncheck the "Enable Forms Base...

Sorting a Report Based on Criteria
I have a report that I would like to sort based on user-entered criteria. There are two option groups in my form. Each option group has four fields (Name, Title, Date, ID) that the user can search. The user would select one option from each group. The first group is the primary sort and the second option group is for the secondary sort. For example, if the user selects Name from the Primary option group and Date from the Secondary option group, the report should be sorted by Name and then by Date. What code can I use to enable the user to search this way? Use a calculated field ...

Pop up Form to set parameter of query to generate a report
I have a pop up form that opens when I run a report via a macro. The query searchs for an item (drug) that has 2 different mnemonics. (fields are mnemonic2 and mnemonic3 from table PDM) I cannot append the table fields into a new column because the table is on a server that does not allow changes. The problem is that I cannot figure out a way to attach [Forms]![frm_mnemonic]![lstbox] ---the combobox I am using on the form ----to mnemonic2 and mnemonic3 so it it will search both since they are both text values. I can attach it to one or the other field and it works fine, but when I attach it ...

Changing Names of Multiple Cell Link Ranges
I have a series of drop down boxes created with the Forms menu. The cell link range for each dropdown is different, as follows: Cell Link Box1 = DemandBase_A_UndistExp1 Cell Link Box2 = DemandBase_A_UndistExp2 Cell Link Box3 = DemandBase_A_UndistExp3 Cell Link Box...n = DemandBase_A_UndistExp...n I want to change them all at once to: DemandBase_A_OtherCost1 DemandBase_A_OtherCost2 DemandBase_A_OtherCost... I know I can change the entire name using the following code: Sub Change_Drop_Link() For Each bx In ActiveSheet.DropDowns If bx.LinkedCell = "DemandBase_A_UndistExp1" Then ...

How to automatically populate an Excel database w/data from many forms?
I have a data collection spreadsheet laid out like a form for multipl users; each user will do a save as to create hundreds of records o copies of this form. We are using the data collected to build an Exce database. Currently we are manually keying the data from the form into a single spreadsheet (the database). Is there a way to automat the transfer of the data from the forms into the database? Also, eac record will have a unique ID number. We are working in MS Excel 2002. Thank you -- ~~ Message posted from http://www.ExcelForum.com I think I'd tell the user to run a macro that...

Sorting Grouped & Non-grouped Rows
Hi, I have a worksheet listing all the tenants in an industrial business park. The first row is column headings then each company's details are listed....one company per row. There happen to be several Industrial Malls/Multi-tenant buildings in the park. For these I have grouped the individual tenants under the owner of the Building(bold below). Each tenant has their own data and the owner of the building (Company C below) display aggregate data from all its tenants Company A Company D COMPANY C (INDUSTRIAL MALL/MULTI-TENANT BUILDING) ...COMPANY E ...COMPANY F ...COMPANY H Company ...

How to add non-native attribute to XmlSchema in .NET
I am building an XML Schema with the SOM in .NET and would like to add a non-native attribute to one of my elements. Does anyone know how to do this? (Whithout rendering the schema to an XmlDocument to do it.) Thanks! Eric Eric wrote: > I am building an XML Schema with the SOM in .NET and would like to add > a non-native attribute to one of my elements. Does anyone know how to > do this? (Whithout rendering the schema to an XmlDocument to do it.) What do you mean "non-native"? If that means non-schema attributes (some proprietary attribute say on xs:element) you can add...

Combo box for related records AND non-related records
Hello, Sorry if this question has been answered, but my searches have not yielded the posts. Here is what I want to do: I have a form with a combo box for City and one for State. I have two lookup tables: lkpCity cityID, City, stateID lkpState stateID, State I have the combo box for City set up, and the one for State to depend on the control for City. These are necessary because we've got a lot of spelling errors. Very often, however, the respondents whose data we are entering fail to provide a city, but list their state. If this happens, I can't get a l...

OWA 2003 #3
The junk mail feature works beautifully on outlook 2003 client. On OWA 2003, it doesn't seem to be working. Is junk mail a feature of exchange 2003 or outlook 2003? If it is a feature of exchange 2003, how come spam gets through when I use OWA 2003? Thanks in advance, "RG" <nobody@nowhere.com> wrote: >The junk mail feature works beautifully on outlook 2003 client. On OWA >2003, it doesn't seem to be working. > >Is junk mail a feature of exchange 2003 or outlook 2003? Outlook 2003. >If it is a feature of exchange 2003, how come spam gets thro...

Replacing values based on a set list
Hi Could anyone help me with this one: - I have an Excel workbook with two worksheets: sheet1 and sheet2. On sheet1, I have 2 columns of data:- Column 1 - CityID Column2 - CityName On sheet2, I have a list of 500 office locations, some of which are in the same city. Sheet2 has several columns, one of which is the city location of the office. I am trying to prepare the Excel sheet ready to import into Access and want to replace each instance of the city location listed on sheet2 with the CityID number from sheet1 where the city is matched. For example: - Sheet 1 CityID CityName 1...

Can't get a value from a querry into a forms text box
I have a main Shippin Control table, and a main Shipping Control form with description of cargo and quantity text boxes. I have a querry which is a join of tblValues and tblShipping_Control. The SQL is below SELECT Shipping_Control.DescriptionofCargo, Shipping_Control.CargoQty, tblValues.Value, ([Shipping_Control].[CargoQty]*[tblValues].[Value]) AS CommercialValue, Shipping_Control.ShippingDate, Shipping_Control.ShipTo, Shipping_Control.ShipFrom, Shipping_Control.CollectionNoteNo, Shipping_Control.PackingListNo, Shipping_Control.ShipmentID, Shipping_Control.Customer FROM Ship...

OWA: Best course of action when OWA is generally defunct?
I have an Exchange 2003 server that was running beautifully until we found we had a problem managing public folders from Exchange System Manager, requiring a new SSL certificate to be generated. We were able to fix the System Manager problem, but then we found that OWA was broken. We get the dreaded "Page cannot be displayed" error when trying to go in on port 443, and attempts to go in through 80 results in a 404.3 error (must be viewed over SSL). Generally speaking, the Exchange server seems to be in good health - - it's only the Web-based parts of the system that seem hose...